Rug Pull Finder gets exploited, questions of credibility raised

Rug pulls have become quite common in the crypto and NFT industry. NFT Rug Pull Finder, a project to help find scammers and audit NFT collections, got exploited via NFT smart contract.

[{"selector":"#anim-695d0f37-b16b-4b8c-a2a8-cdb542b20e14","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-80ae9dd5-d64f-48b9-905a-fadc0a63430f","keyframes":{"transform":["translate3d(0px, 452.99146%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}]

Twitter user and analyst @NFTHerder and the NFT community, in general, are now questioning the platform’s credibility as a security firm.

[{"selector":"#anim-87ceea54-12b1-49fe-a50c-fad708ac3e7b [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-13.727678400767163%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":3000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] Rug Pull Finder recently dropped a free mint on its platform; however, two scammers took advantage of a loophole within the smart contract and attacked it to mint 450 NFTs instead of one.

[{"selector":"#anim-726466f0-bfb0-4b45-ad26-43301c2d3a7e","keyframes":{"opacity":[0,1]},"delay":400,"duration":2500,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-dadb4859-70eb-4840-9f72-65927e3137cc","keyframes":{"transform":["translate3d(-125%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":400,"duration":2500,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] The collection called “Bad Guys” features 1,221 NFT artworks about “scammers accidentally let loose on the blockchain.” A wallet could only mint one NFT from the minting stage.

Bad Guys was a pre-sale via a whitelist before the official launch of the 10,000 NFT collection. The NFT holder would receive the benefits of minting the main RPF NFT drop and future NFT drops.

[{"selector":"#anim-9137d5e5-9883-4632-8ec2-32c44f9861ee","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-12af208d-44cf-4c26-94ef-b686e92efce4","keyframes":{"transform":["translate3d(0px, 448.59585%, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-c8b40c76-142b-4df0-a51d-c6a1b937a2b7","keyframes":{"opacity":[0,1]},"delay":200,"duration":2500,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-75c5b531-28ab-4159-bcc6-3191dab98f00","keyframes":{"transform":["translate3d(0px, 278.84261%, 0)","translate3d(0px, 0px, 0)"]},"delay":200,"duration":2500,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] Source: Cointelegraph

With the exploit happening, many people criticized NFT by Rug Pull Finder for not ensuring its platform’s security.

The RPF team came on Twitter to explain the exploit. According to them, the scammers saw a flaw in the code and exploited it, even though the team had received a warning from a source about it.

“After reviewing it with three different dev teams, we did not believe the credibility of the information sent to us... We were clearly wrong, and we are truly, truly sorry,” the team said.

The ironic thing about this exploit is that the project was founded to detect technical flaws in NFT small contracts but it failed to audit its own NFT smart contract.

As of now, the team has made a deal with one of the scammers to recover 330 NFTs in exchange for a bounty of 2.5 ETH, which is around $3,944.

Rug Pull Finder gets exploited, questions of credibility raised

Rug pulls have become quite common in the crypto and NFT industry. NFT Rug Pull Finder, a project to help find scammers and audit NFT collections, got exploited via NFT smart contract.

Bad Guys was a pre-sale via a whitelist before the official launch of the 10,000 NFT collection. The NFT holder would receive the benefits of minting the main RPF NFT drop and future NFT drops.

“After reviewing it with three different dev teams, we did not believe the credibility of the information sent to us... We were clearly wrong, and we are truly, truly sorry,” the team said.

Next up